keil
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes the Keil uVision executable (
UV4.exe) using thesubprocessmodule to perform build, clean, and flash operations. - Evidence: In
scripts/keil_build.py, therun_uv4function constructs a command list[uv4_exe, flag, str(project_path), "-j0", "-o", str(log_file)]and executes it usingsubprocess.run. - Security Note: The implementation uses a list for the command arguments rather than a single string, which is a best practice that prevents shell injection vulnerabilities.
- [INDIRECT_PROMPT_INJECTION]: The skill reads and parses XML-based Keil project files (
.uvprojx,.uvproj). - Evidence:
scripts/keil_project.pyandscripts/keil_build.pyusexml.etree.ElementTreeto extractTargetName,OutputDirectory, andOutputName. - Security Note: While these files are external data, the skill only extracts specific structural metadata required for the build process, posing a low risk of influencing the agent's behavior maliciously.
Audit Metadata